AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…

Published:

29 mei 2026 om 22:00:00

Alert date:

30 mei 2026 om 17:07:56

Source:

nvd.nist.gov

Web Technologies, Database & Storage

CVE-2018-25417 affects AiOPMSD Final 1.0.0 with an SQL injection vulnerability in the quality parameter. Unauthenticated attackers can execute arbitrary SQL queries by sending crafted GET requests to quality.php. The vulnerability allows extraction of sensitive database information including usernames, database names, and version details. This represents a critical security flaw that enables unauthorized database access without authentication requirements.

Technical details

Mitigation steps:

Affected products:

AiOPMSD Final